How is data protected on a Wi-Fi network?

Question

WiFi

Good afternoon, I want to know how data is protected on a Wi-Fi network, or rather, whether I understood everything correctly.

Many write that an attacker can disable a certain function in the OS (using the same Wireshark) so that it stops dropping packets belonging to another client on the local network, is that true? That is, as I understand it, if I am sitting somewhere in a cafe and connected to an open access point, can any other person use similar procedures to catch packets coming to me and read all my data?
To avoid this type of sniffing, the encryption protocols WEP, WPA, WPA2, WPA3, and so on were invented.
They also provide protection against cracking the password and gaining access to the hotspot, right?

That is, if I connect to a public Wi-Fi hotspot with WPA3 protection, then an attacker can intercept all traffic, but it will be encrypted and it will be impossible to decrypt it, even if I use http, and in the case of https, it will also be encrypted SSL / TLS, so that it will be impossible to decrypt it even from the owner of the access point, right?

I want to make sure that I have the right idea about data protection in public networks, thanks in advance.

Answer 1

to protect yourself from intercepting your traffic when connecting to an open point, use your own VPN server.
you have no idea how many of these points are used with factory passwords of the admin:admin type, so you need to encrypt traffic not only for your device access point, but in general all traffic passing through this
UPD (the main one from the comments about WPA3 and security):
in WPA3 has already found a number of vulnerabilities and it is not a fact that there are no zero-day vulnerabilities.
If you unconditionally trust the access point itself and, after connecting, made sure that the MAC address of the access point matches this device, and did not fall for a listener in the middle, and that WPA3 is used, and not the second version, then in this case you can assume that your connection is secure .
In WPA1 / 2, vulnerabilities for decrypting intercepted "radio" traffic are associated with vulnerabilities that allow intercepting the key
In WPA3, as far as I know, no such vulnerability has been found yet